III. AMENDMENTS TO THE CLAIMS 

The following listing of claims replaces all prior versions, and listings, of claims in the 
application: 

1 . (Currently amended) A computer implemented method for reviewing a business process 
to identify and address risks, comprising the steps of 

providing a business process; 

identifying risks in the business process as control points; and 
arranging information pertaining to the control points in a standard format using a 
template and storing the template in a computer database to provide subsequent access to the 
template, wherein the information comprises a set of tests to be performed by a test entity, and 
wherein the set of tests identif y an occurrence of the risks in the business process. 

2. (Original) The method of claim 1, further comprising the steps of 

identifying actions to address the risks; 

arranging the identified actions in the template; and 

performing an audit using the template. 

3. (Cancelled). 



4. (Currently amended) The method of claim 1, wherein the step of arranging information 
further comprises a set of actions, wherein the set of actions address the occurrence of the risks. 

09/884,095 Page 4 of 22 



5. (Currently amended) The method of claim 4, wherein the step of arranging information 
further comprises: 

a business process; 

a test entity, wherein the test entity performs the set of tests; 

an action entity, wherein the action entity performs the set of actions; and 

audit details. 

6. (Currently amended) The method of claim 5, wherein the step of arranging information 
further comprises: 

a control point name; 
control point revisions; 
background information; and 
a control point frequency. 

7. (Currently amended) A computer implemented method for reviewing a business process 
to identify and address risks, comprising the steps of 

providing a business process; 

implementing a set of tests to be performed by a test entity to identify an occurrence of 

the risks in the business process as control points; 

identifying a set of actions to address the identified occurrence of the risks; and 
arranging the set of tests and the identified actions in a standard format using a template, 

and storing the template in a computer database to provide subsequent access to the template. 
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8. (Currently amended) The method of claim 7, wherein the step of implementing the set of 
tests and the set of actions comprise control point information. 

9. (Previously presented) The method of claim 7, further comprising the step of accessing 
the stored template to perform an audit. 

10. (Currently amended) A computer implemented method for reviewing a business process 
to identify and address risks, comprising the steps of 

providing a business process; 

implementing a set of tests to be performed by a test entity to identify an occurrence of 
the risks in the business process as control points; 

identifying a set of actions to address the identified occurrence of the risks; 

arranging the business process, the set of tests, and the identified actions in a standard 
format using a template, and storing the template in a computer database to provide subsequent 
access to the template; and 

auditing the control points based on the template. 

11. (Original) The method of claim 10, wherein the implementing step comprises the step of 
examining steps in the business process to identify risks. 

12. (Currently amended) A computer implemented method for arranging business process 
control point information in a template, comprising the steps of 
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arranging a set of tests to be performed by a test entity in a test field, wherein the set of 
tests identifies an occurrence of a risk r isks-in the business process; and 

arranging a set of actions in an action field, wherein the set of actions addresses the 
identified occurrence of a riskr isks. 

13. (Original) The method of claim 12, further comprising the steps of 

arranging a business process in a business process field; 

arranging a test entity in a test execution field, wherein the test entity performs the set of 

tests; 

arranging an action entity in an action execution field, wherein the action entity performs 
the set of actions; and 

arranging audit details in an audit field. 

14. (Original) The method of claim 13, further comprising: 

arranging a control point name in a name field; 
arranging control point revisions in a revision field; 
arranging background information in an information field; and 
arranging a control point frequency in an interval field. 

15. (Previously presented) The method of claim 12, further comprising the step of performing 
an audit based on the stored template. 
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16. (Currently amended) A computer implemented method for arranging business process 
control point information in a template, comprising the steps of 

arranging a business process in a business process field; 

arranging a set of tests to be performed by a test entity in a test field, wherein the set of 
tests identifies an occurrence of a risk risks in the business process; and 

arranging a set of actions in an action field, wherein the set of actions addresses the 
identified occurrence of a riskr isks. 

17. (Previously presented) The method of claim 16, further comprising the steps of: 

arranging a test entity in a test execution field, wherein the test entity performs the set of 

tests; 

arranging an action entity in an action execution field, wherein the action entity performs 
the set of actions; and 

arranging audit details in an audit field; 

storing the template in a computer database to provide subsequent access to the template; 

and 

performing an audit based on the stored template. 

18. (Original) The method of claim 17, further comprising: 

arranging a control point name in a name field; 
arranging control point revisions in a revision field; 
arranging background information in an information field; and 
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arranging a control point frequency in an interval field. 



19. (Currently amended) A computer implemented template for arranging business process 
control point information, comprising: 

a test field for arranging a set of tests to be performed by a test entity, wherein the set of 
tests identifies an occurrence of a risk risks in a business process; and 

an action field for arranging a set of actions, wherein the set of actions addresses the 
identified occurrence of a riskr isks. 

20. (Currently amended) The computer implemented t emplate of claim 19, further 
comprising: 

a business process field for arranging a business process; 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 

an action execution field for arranging an action entity, wherein the action entity 
performs the set of actions; and 

an audit field for arranging audit details. 

21 . (Currently amended) The computer implemented t emplate of claim 20, further 
comprising: 

a name field for arranging a control point name; 
a revision field for arranging control point revisions; 
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an information field for arranging background information; and 
an interval field for arranging a control point frequency. 



22. (Currently amended) The computer implemented t emplate of claim 19, wherein the risks 
comprise control points, and wherein the set of tests and the set of actions comprise control point 
information. 

23. (Currently amended) A computer implemented template for arranging business process 
control point information, comprising: 

a business process field for arranging a business process; 

a test field for arranging a set of tests to be performed by a test entity, wherein the set of 
tests identifies an occurrence of a risk rislcs in the business process; and 

an action field for arranging a set of actions, wherein the set of actions addresses the 
identified occurrence of a riskr isks. 

24. (Currently amended) The computer implemented t emplate of claim 23, further 
comprising: 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 

an action execution field for arranging an action entity, wherein the action entity 
performs the set of actions; and 

an audit field for arranging audit details. 
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25. (Currently amended) The computer implemented t emplate of claim 24, further 
comprising: 

a name field for arranging a control point name; 

a revision field for arranging control point revisions; 

an information field for arranging background information; and 

an interval field for arranging a control point frequency. 

26. (Currently amended) A computer implemented template for arranging business process 
control point information, comprising: 

a business process field for arranging a business process; 

a test field for arranging a set of tests to be performed by a test entity, wherein the set of 
tests identifies an occurrence of a risk risks in the business process steps; 

an action field for arranging a set of actions, wherein the set of actions addresses the 
identified risks; 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 

an action execution field for arranging an action entity, wherein the action entity 
performs the set of actions; and 

an audit field for arranging audit details. 

27. (Currently amended) The computer implemented t emplate of claim 26, further 
comprising: 
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a name field for arranging a control point name; 

a revision history field for arranging control point revisions, wherein the revision history 
field includes fields for arranging a revision number, a revision date, a summary of changes, and 
changes marked; 

an information access field for arranging background information, wherein the 
information access field includes at least one hypertext link that allows direct access to the 
background information; and 

an interval field for arranging a control point frequency. 

28. (Currently amended) A program product stored on a recordable medium for arranging 
business process control point information in a template, comprising: 

an interface for receiving business process control point information; 

a template for arranging the received information, wherein the template comprises: 

a test field for arranging a set of tests to be performed by a test entity, wherein the set of 
tests identifies an occurrence of a risk risks in a business process; and 

an action field for arranging a set of actions, wherein the set of actions addresses the 
occurrence of the identified-^i^k s risk . 

29. (Original) The program product of claim 28, wherein the template further comprises: 

a business process field for arranging a business process; 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 
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an action execution field for arranging action entities, wherein the action entity performs 
the set of actions; and 

an audit field for arranging audit details. 

30. (Previously presented) The program product of claim 29, wherein the template further 
comprises: 

a name field for arranging a control point name; 

a revision history field for arranging control point revisions, wherein the revision history 
field includes fields for arranging a revision number, a revision date, a summary of changes, and 
changes marked; 

an information access field for arranging background information, wherein the 
information access field includes at least one hypertext link that allows direct access to the 
background information; and 

an interval field for arranging a control point frequency. 
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